~ [ source navigation ] ~ [ diff markup ] ~ [ identifier search ] ~

TOMOYO Linux Cross Reference
Linux/net/Kconfig

Version: ~ [ linux-6.12-rc7 ] ~ [ linux-6.11.7 ] ~ [ linux-6.10.14 ] ~ [ linux-6.9.12 ] ~ [ linux-6.8.12 ] ~ [ linux-6.7.12 ] ~ [ linux-6.6.60 ] ~ [ linux-6.5.13 ] ~ [ linux-6.4.16 ] ~ [ linux-6.3.13 ] ~ [ linux-6.2.16 ] ~ [ linux-6.1.116 ] ~ [ linux-6.0.19 ] ~ [ linux-5.19.17 ] ~ [ linux-5.18.19 ] ~ [ linux-5.17.15 ] ~ [ linux-5.16.20 ] ~ [ linux-5.15.171 ] ~ [ linux-5.14.21 ] ~ [ linux-5.13.19 ] ~ [ linux-5.12.19 ] ~ [ linux-5.11.22 ] ~ [ linux-5.10.229 ] ~ [ linux-5.9.16 ] ~ [ linux-5.8.18 ] ~ [ linux-5.7.19 ] ~ [ linux-5.6.19 ] ~ [ linux-5.5.19 ] ~ [ linux-5.4.285 ] ~ [ linux-5.3.18 ] ~ [ linux-5.2.21 ] ~ [ linux-5.1.21 ] ~ [ linux-5.0.21 ] ~ [ linux-4.20.17 ] ~ [ linux-4.19.323 ] ~ [ linux-4.18.20 ] ~ [ linux-4.17.19 ] ~ [ linux-4.16.18 ] ~ [ linux-4.15.18 ] ~ [ linux-4.14.336 ] ~ [ linux-4.13.16 ] ~ [ linux-4.12.14 ] ~ [ linux-4.11.12 ] ~ [ linux-4.10.17 ] ~ [ linux-4.9.337 ] ~ [ linux-4.4.302 ] ~ [ linux-3.10.108 ] ~ [ linux-2.6.32.71 ] ~ [ linux-2.6.0 ] ~ [ linux-2.4.37.11 ] ~ [ unix-v6-master ] ~ [ ccs-tools-1.8.12 ] ~ [ policy-sample ] ~
Architecture: ~ [ i386 ] ~ [ alpha ] ~ [ m68k ] ~ [ mips ] ~ [ ppc ] ~ [ sparc ] ~ [ sparc64 ] ~

Diff markup

Differences between /net/Kconfig (Version linux-6.12-rc7) and /net/Kconfig (Version linux-5.1.21)


  1 # SPDX-License-Identifier: GPL-2.0-only        << 
  2 #                                                   1 #
  3 # Network configuration                             2 # Network configuration
  4 #                                                   3 #
  5                                                     4 
  6 menuconfig NET                                      5 menuconfig NET
  7         bool "Networking support"                   6         bool "Networking support"
  8         select NLATTR                               7         select NLATTR
  9         select GENERIC_NET_UTILS                    8         select GENERIC_NET_UTILS
 10         select BPF                                  9         select BPF
 11         help                                   !!  10         ---help---
 12           Unless you really know what you are      11           Unless you really know what you are doing, you should say Y here.
 13           The reason is that some programs nee     12           The reason is that some programs need kernel networking support even
 14           when running on a stand-alone machin     13           when running on a stand-alone machine that isn't connected to any
 15           other computer.                          14           other computer.
 16                                                    15 
 17           If you are upgrading from an older k     16           If you are upgrading from an older kernel, you
 18           should consider updating your networ     17           should consider updating your networking tools too because changes
 19           in the kernel and the tools often go     18           in the kernel and the tools often go hand in hand. The tools are
 20           contained in the package net-tools,      19           contained in the package net-tools, the location and version number
 21           of which are given in <file:Document     20           of which are given in <file:Documentation/Changes>.
 22                                                    21 
 23           For a general introduction to Linux      22           For a general introduction to Linux networking, it is highly
 24           recommended to read the NET-HOWTO, a     23           recommended to read the NET-HOWTO, available from
 25           <http://www.tldp.org/docs.html#howto     24           <http://www.tldp.org/docs.html#howto>.
 26                                                    25 
 27 if NET                                             26 if NET
 28                                                    27 
 29 config WANT_COMPAT_NETLINK_MESSAGES                28 config WANT_COMPAT_NETLINK_MESSAGES
 30         bool                                       29         bool
 31         help                                       30         help
 32           This option can be selected by other     31           This option can be selected by other options that need compat
 33           netlink messages.                        32           netlink messages.
 34                                                    33 
 35 config COMPAT_NETLINK_MESSAGES                     34 config COMPAT_NETLINK_MESSAGES
 36         def_bool y                                 35         def_bool y
 37         depends on COMPAT                          36         depends on COMPAT
 38         depends on WEXT_CORE || WANT_COMPAT_NE     37         depends on WEXT_CORE || WANT_COMPAT_NETLINK_MESSAGES
 39         help                                       38         help
 40           This option makes it possible to sen     39           This option makes it possible to send different netlink messages
 41           to tasks depending on whether the ta     40           to tasks depending on whether the task is a compat task or not. To
 42           achieve this, you need to set skb_sh     41           achieve this, you need to set skb_shinfo(skb)->frag_list to the
 43           compat skb before sending the skb, t     42           compat skb before sending the skb, the netlink code will sort out
 44           which message to actually pass to th     43           which message to actually pass to the task.
 45                                                    44 
 46           Newly written code should NEVER need     45           Newly written code should NEVER need this option but do
 47           compat-independent messages instead!     46           compat-independent messages instead!
 48                                                    47 
 49 config NET_INGRESS                                 48 config NET_INGRESS
 50         bool                                       49         bool
 51                                                    50 
 52 config NET_EGRESS                                  51 config NET_EGRESS
 53         bool                                       52         bool
 54                                                    53 
 55 config NET_XGRESS                              << 
 56         select NET_INGRESS                     << 
 57         select NET_EGRESS                      << 
 58         bool                                   << 
 59                                                << 
 60 config NET_REDIRECT                            << 
 61         bool                                   << 
 62                                                << 
 63 config SKB_DECRYPTED                           << 
 64         bool                                   << 
 65                                                << 
 66 config SKB_EXTENSIONS                              54 config SKB_EXTENSIONS
 67         bool                                       55         bool
 68                                                    56 
 69 config NET_DEVMEM                              << 
 70         def_bool y                             << 
 71         depends on DMA_SHARED_BUFFER           << 
 72         depends on GENERIC_ALLOCATOR           << 
 73         depends on PAGE_POOL                   << 
 74                                                << 
 75 menu "Networking options"                          57 menu "Networking options"
 76                                                    58 
 77 source "net/packet/Kconfig"                        59 source "net/packet/Kconfig"
 78 source "net/unix/Kconfig"                          60 source "net/unix/Kconfig"
 79 source "net/tls/Kconfig"                           61 source "net/tls/Kconfig"
 80 source "net/xfrm/Kconfig"                          62 source "net/xfrm/Kconfig"
 81 source "net/iucv/Kconfig"                          63 source "net/iucv/Kconfig"
 82 source "net/smc/Kconfig"                           64 source "net/smc/Kconfig"
 83 source "net/xdp/Kconfig"                           65 source "net/xdp/Kconfig"
 84                                                    66 
 85 config NET_HANDSHAKE                           << 
 86         bool                                   << 
 87         depends on SUNRPC || NVME_TARGET_TCP | << 
 88         default y                              << 
 89                                                << 
 90 config NET_HANDSHAKE_KUNIT_TEST                << 
 91         tristate "KUnit tests for the handshak << 
 92         default KUNIT_ALL_TESTS                << 
 93         depends on KUNIT                       << 
 94         help                                   << 
 95           This builds the KUnit tests for the  << 
 96                                                << 
 97           KUnit tests run during boot and outp << 
 98           log in TAP format (https://testanyth << 
 99           kernel devs running KUnit test harne << 
100           into a production build.             << 
101                                                << 
102           For more information on KUnit and un << 
103           to the KUnit documentation in Docume << 
104                                                << 
105 config INET                                        67 config INET
106         bool "TCP/IP networking"                   68         bool "TCP/IP networking"
107         help                                   !!  69         select CRYPTO
                                                   >>  70         select CRYPTO_AES
                                                   >>  71         ---help---
108           These are the protocols used on the      72           These are the protocols used on the Internet and on most local
109           Ethernets. It is highly recommended      73           Ethernets. It is highly recommended to say Y here (this will enlarge
110           your kernel by about 400 KB), since      74           your kernel by about 400 KB), since some programs (e.g. the X window
111           system) use TCP/IP even if your mach     75           system) use TCP/IP even if your machine is not connected to any
112           other computer. You will get the so-     76           other computer. You will get the so-called loopback device which
113           allows you to ping yourself (great f     77           allows you to ping yourself (great fun, that!).
114                                                    78 
115           For an excellent introduction to Lin     79           For an excellent introduction to Linux networking, please read the
116           Linux Networking HOWTO, available fr     80           Linux Networking HOWTO, available from
117           <http://www.tldp.org/docs.html#howto     81           <http://www.tldp.org/docs.html#howto>.
118                                                    82 
119           If you say Y here and also to "/proc     83           If you say Y here and also to "/proc file system support" and
120           "Sysctl support" below, you can chan     84           "Sysctl support" below, you can change various aspects of the
121           behavior of the TCP/IP code by writi     85           behavior of the TCP/IP code by writing to the (virtual) files in
122           /proc/sys/net/ipv4/*; the options ar     86           /proc/sys/net/ipv4/*; the options are explained in the file
123           <file:Documentation/networking/ip-sy !!  87           <file:Documentation/networking/ip-sysctl.txt>.
124                                                    88 
125           Short answer: say Y.                     89           Short answer: say Y.
126                                                    90 
127 if INET                                            91 if INET
128 source "net/ipv4/Kconfig"                          92 source "net/ipv4/Kconfig"
129 source "net/ipv6/Kconfig"                          93 source "net/ipv6/Kconfig"
130 source "net/netlabel/Kconfig"                      94 source "net/netlabel/Kconfig"
131 source "net/mptcp/Kconfig"                     << 
132                                                    95 
133 endif # if INET                                    96 endif # if INET
134                                                    97 
135 config NETWORK_SECMARK                             98 config NETWORK_SECMARK
136         bool "Security Marking"                    99         bool "Security Marking"
137         help                                      100         help
138           This enables security marking of net    101           This enables security marking of network packets, similar
139           to nfmark, but designated for securi    102           to nfmark, but designated for security purposes.
140           If you are unsure how to answer this    103           If you are unsure how to answer this question, answer N.
141                                                   104 
142 config NET_PTP_CLASSIFY                           105 config NET_PTP_CLASSIFY
143         def_bool n                                106         def_bool n
144                                                   107 
145 config NETWORK_PHY_TIMESTAMPING                   108 config NETWORK_PHY_TIMESTAMPING
146         bool "Timestamping in PHY devices"        109         bool "Timestamping in PHY devices"
147         select NET_PTP_CLASSIFY                   110         select NET_PTP_CLASSIFY
148         help                                      111         help
149           This allows timestamping of network  !! 112           This allows timestamping of network packets by PHYs with
150           other MII bus snooping devices) with !! 113           hardware timestamping capabilities. This option adds some
151           capabilities. This option adds some  !! 114           overhead in the transmit and receive paths.
152           and receive paths.                   << 
153                                                   115 
154           If you are unsure how to answer this    116           If you are unsure how to answer this question, answer N.
155                                                   117 
156 menuconfig NETFILTER                              118 menuconfig NETFILTER
157         bool "Network packet filtering framewo    119         bool "Network packet filtering framework (Netfilter)"
158         help                                   !! 120         ---help---
159           Netfilter is a framework for filteri    121           Netfilter is a framework for filtering and mangling network packets
160           that pass through your Linux box.       122           that pass through your Linux box.
161                                                   123 
162           The most common use of packet filter    124           The most common use of packet filtering is to run your Linux box as
163           a firewall protecting a local networ    125           a firewall protecting a local network from the Internet. The type of
164           firewall provided by this kernel sup    126           firewall provided by this kernel support is called a "packet
165           filter", which means that it can rej    127           filter", which means that it can reject individual network packets
166           based on type, source, destination e    128           based on type, source, destination etc. The other kind of firewall,
167           a "proxy-based" one, is more secure     129           a "proxy-based" one, is more secure but more intrusive and more
168           bothersome to set up; it inspects th    130           bothersome to set up; it inspects the network traffic much more
169           closely, modifies it and has knowled    131           closely, modifies it and has knowledge about the higher level
170           protocols, which a packet filter lac    132           protocols, which a packet filter lacks. Moreover, proxy-based
171           firewalls often require changes to t    133           firewalls often require changes to the programs running on the local
172           clients. Proxy-based firewalls don't    134           clients. Proxy-based firewalls don't need support by the kernel, but
173           they are often combined with a packe    135           they are often combined with a packet filter, which only works if
174           you say Y here.                         136           you say Y here.
175                                                   137 
176           You should also say Y here if you in    138           You should also say Y here if you intend to use your Linux box as
177           the gateway to the Internet for a lo    139           the gateway to the Internet for a local network of machines without
178           globally valid IP addresses. This is    140           globally valid IP addresses. This is called "masquerading": if one
179           of the computers on your local netwo    141           of the computers on your local network wants to send something to
180           the outside, your box can "masquerad    142           the outside, your box can "masquerade" as that computer, i.e. it
181           forwards the traffic to the intended    143           forwards the traffic to the intended outside destination, but
182           modifies the packets to make it look    144           modifies the packets to make it look like they came from the
183           firewall box itself. It works both w    145           firewall box itself. It works both ways: if the outside host
184           replies, the Linux box will silently    146           replies, the Linux box will silently forward the traffic to the
185           correct local computer. This way, th    147           correct local computer. This way, the computers on your local net
186           are completely invisible to the outs    148           are completely invisible to the outside world, even though they can
187           reach the outside and can receive re    149           reach the outside and can receive replies. It is even possible to
188           run globally visible servers from wi    150           run globally visible servers from within a masqueraded local network
189           using a mechanism called portforward    151           using a mechanism called portforwarding. Masquerading is also often
190           called NAT (Network Address Translat    152           called NAT (Network Address Translation).
191                                                   153 
192           Another use of Netfilter is in trans    154           Another use of Netfilter is in transparent proxying: if a machine on
193           the local network tries to connect t    155           the local network tries to connect to an outside host, your Linux
194           box can transparently forward the tr    156           box can transparently forward the traffic to a local server,
195           typically a caching proxy server.       157           typically a caching proxy server.
196                                                   158 
197           Yet another use of Netfilter is buil    159           Yet another use of Netfilter is building a bridging firewall. Using
198           a bridge with Network packet filteri    160           a bridge with Network packet filtering enabled makes iptables "see"
199           the bridged traffic. For filtering o    161           the bridged traffic. For filtering on the lower network and Ethernet
200           protocols over the bridge, use ebtab    162           protocols over the bridge, use ebtables (under bridge netfilter
201           configuration).                         163           configuration).
202                                                   164 
203           Various modules exist for netfilter     165           Various modules exist for netfilter which replace the previous
204           masquerading (ipmasqadm), packet fil    166           masquerading (ipmasqadm), packet filtering (ipchains), transparent
205           proxying, and portforwarding mechani    167           proxying, and portforwarding mechanisms. Please see
206           <file:Documentation/Changes> under "    168           <file:Documentation/Changes> under "iptables" for the location of
207           these packages.                         169           these packages.
208                                                   170 
209 if NETFILTER                                      171 if NETFILTER
210                                                   172 
211 config NETFILTER_ADVANCED                         173 config NETFILTER_ADVANCED
212         bool "Advanced netfilter configuration    174         bool "Advanced netfilter configuration"
213         depends on NETFILTER                      175         depends on NETFILTER
214         default y                                 176         default y
215         help                                      177         help
216           If you say Y here you can select bet    178           If you say Y here you can select between all the netfilter modules.
217           If you say N the more unusual ones w    179           If you say N the more unusual ones will not be shown and the
218           basic ones needed by most people wil    180           basic ones needed by most people will default to 'M'.
219                                                   181 
220           If unsure, say Y.                       182           If unsure, say Y.
221                                                   183 
222 config BRIDGE_NETFILTER                           184 config BRIDGE_NETFILTER
223         tristate "Bridged IP/ARP packets filte    185         tristate "Bridged IP/ARP packets filtering"
224         depends on BRIDGE                         186         depends on BRIDGE
225         depends on NETFILTER && INET              187         depends on NETFILTER && INET
226         depends on NETFILTER_ADVANCED             188         depends on NETFILTER_ADVANCED
227         select NETFILTER_FAMILY_BRIDGE            189         select NETFILTER_FAMILY_BRIDGE
228         select SKB_EXTENSIONS                     190         select SKB_EXTENSIONS
229         help                                   !! 191         default m
                                                   >> 192         ---help---
230           Enabling this option will let arptab    193           Enabling this option will let arptables resp. iptables see bridged
231           ARP resp. IP traffic. If you want a     194           ARP resp. IP traffic. If you want a bridging firewall, you probably
232           want this option enabled.               195           want this option enabled.
233           Enabling or disabling this option do    196           Enabling or disabling this option doesn't enable or disable
234           ebtables.                               197           ebtables.
235                                                   198 
236           If unsure, say N.                       199           If unsure, say N.
237                                                   200 
238 source "net/netfilter/Kconfig"                    201 source "net/netfilter/Kconfig"
239 source "net/ipv4/netfilter/Kconfig"               202 source "net/ipv4/netfilter/Kconfig"
240 source "net/ipv6/netfilter/Kconfig"               203 source "net/ipv6/netfilter/Kconfig"
                                                   >> 204 source "net/decnet/netfilter/Kconfig"
241 source "net/bridge/netfilter/Kconfig"             205 source "net/bridge/netfilter/Kconfig"
242                                                   206 
243 endif                                             207 endif
244                                                   208 
                                                   >> 209 source "net/bpfilter/Kconfig"
                                                   >> 210 
245 source "net/dccp/Kconfig"                         211 source "net/dccp/Kconfig"
246 source "net/sctp/Kconfig"                         212 source "net/sctp/Kconfig"
247 source "net/rds/Kconfig"                          213 source "net/rds/Kconfig"
248 source "net/tipc/Kconfig"                         214 source "net/tipc/Kconfig"
249 source "net/atm/Kconfig"                          215 source "net/atm/Kconfig"
250 source "net/l2tp/Kconfig"                         216 source "net/l2tp/Kconfig"
251 source "net/802/Kconfig"                          217 source "net/802/Kconfig"
252 source "net/bridge/Kconfig"                       218 source "net/bridge/Kconfig"
253 source "net/dsa/Kconfig"                          219 source "net/dsa/Kconfig"
254 source "net/8021q/Kconfig"                        220 source "net/8021q/Kconfig"
                                                   >> 221 source "net/decnet/Kconfig"
255 source "net/llc/Kconfig"                          222 source "net/llc/Kconfig"
256 source "net/appletalk/Kconfig"                 !! 223 source "drivers/net/appletalk/Kconfig"
257 source "net/x25/Kconfig"                          224 source "net/x25/Kconfig"
258 source "net/lapb/Kconfig"                         225 source "net/lapb/Kconfig"
259 source "net/phonet/Kconfig"                       226 source "net/phonet/Kconfig"
260 source "net/6lowpan/Kconfig"                      227 source "net/6lowpan/Kconfig"
261 source "net/ieee802154/Kconfig"                   228 source "net/ieee802154/Kconfig"
262 source "net/mac802154/Kconfig"                    229 source "net/mac802154/Kconfig"
263 source "net/sched/Kconfig"                        230 source "net/sched/Kconfig"
264 source "net/dcb/Kconfig"                          231 source "net/dcb/Kconfig"
265 source "net/dns_resolver/Kconfig"                 232 source "net/dns_resolver/Kconfig"
266 source "net/batman-adv/Kconfig"                   233 source "net/batman-adv/Kconfig"
267 source "net/openvswitch/Kconfig"                  234 source "net/openvswitch/Kconfig"
268 source "net/vmw_vsock/Kconfig"                    235 source "net/vmw_vsock/Kconfig"
269 source "net/netlink/Kconfig"                      236 source "net/netlink/Kconfig"
270 source "net/mpls/Kconfig"                         237 source "net/mpls/Kconfig"
271 source "net/nsh/Kconfig"                          238 source "net/nsh/Kconfig"
272 source "net/hsr/Kconfig"                          239 source "net/hsr/Kconfig"
273 source "net/switchdev/Kconfig"                    240 source "net/switchdev/Kconfig"
274 source "net/l3mdev/Kconfig"                       241 source "net/l3mdev/Kconfig"
275 source "net/qrtr/Kconfig"                         242 source "net/qrtr/Kconfig"
276 source "net/ncsi/Kconfig"                         243 source "net/ncsi/Kconfig"
277                                                   244 
278 config PCPU_DEV_REFCNT                         << 
279         bool "Use percpu variables to maintain << 
280         depends on SMP                         << 
281         default y                              << 
282         help                                   << 
283           network device refcount are using pe << 
284           This can be forced to N to detect un << 
285                                                << 
286 config MAX_SKB_FRAGS                           << 
287         int "Maximum number of fragments per s << 
288         range 17 45                            << 
289         default 17                             << 
290         help                                   << 
291           Having more fragments per skb_shared << 
292           This helps BIG TCP workloads, but mi << 
293           legacy drivers.                      << 
294           This also increases memory overhead  << 
295           and in drivers using build_skb().    << 
296           If unsure, say 17.                   << 
297                                                << 
298 config RPS                                        245 config RPS
299         bool "Receive packet steering"         !! 246         bool
300         depends on SMP && SYSFS                   247         depends on SMP && SYSFS
301         default y                                 248         default y
302         help                                   << 
303           Software receive side packet steerin << 
304           load of received packet processing a << 
305                                                   249 
306 config RFS_ACCEL                                  250 config RFS_ACCEL
307         bool "Hardware acceleration of RFS"    !! 251         bool
308         depends on RPS                            252         depends on RPS
309         select CPU_RMAP                           253         select CPU_RMAP
310         default y                                 254         default y
311         help                                   << 
312           Allowing drivers for multiqueue hard << 
313           accelerate RFS.                      << 
314                                                << 
315 config SOCK_RX_QUEUE_MAPPING                   << 
316         bool                                   << 
317                                                   255 
318 config XPS                                        256 config XPS
319         bool                                      257         bool
320         depends on SMP                            258         depends on SMP
321         select SOCK_RX_QUEUE_MAPPING           << 
322         default y                                 259         default y
323                                                   260 
324 config HWBM                                       261 config HWBM
325         bool                                   !! 262        bool
326                                                   263 
327 config CGROUP_NET_PRIO                            264 config CGROUP_NET_PRIO
328         bool "Network priority cgroup"            265         bool "Network priority cgroup"
329         depends on CGROUPS                        266         depends on CGROUPS
330         select SOCK_CGROUP_DATA                   267         select SOCK_CGROUP_DATA
331         help                                   !! 268         ---help---
332           Cgroup subsystem for use in assignin    269           Cgroup subsystem for use in assigning processes to network priorities on
333           a per-interface basis.                  270           a per-interface basis.
334                                                   271 
335 config CGROUP_NET_CLASSID                         272 config CGROUP_NET_CLASSID
336         bool "Network classid cgroup"             273         bool "Network classid cgroup"
337         depends on CGROUPS                        274         depends on CGROUPS
338         select SOCK_CGROUP_DATA                   275         select SOCK_CGROUP_DATA
339         help                                   !! 276         ---help---
340           Cgroup subsystem for use as general     277           Cgroup subsystem for use as general purpose socket classid marker that is
341           being used in cls_cgroup and for net    278           being used in cls_cgroup and for netfilter matching.
342                                                   279 
343 config NET_RX_BUSY_POLL                           280 config NET_RX_BUSY_POLL
344         bool                                      281         bool
345         default y if !PREEMPT_RT || (PREEMPT_R !! 282         default y
346                                                   283 
347 config BQL                                        284 config BQL
348         bool                                      285         bool
349         prompt "Enable Byte Queue Limits"      << 
350         depends on SYSFS                          286         depends on SYSFS
351         select DQL                                287         select DQL
352         default y                                 288         default y
353                                                   289 
                                                   >> 290 config BPF_JIT
                                                   >> 291         bool "enable BPF Just In Time compiler"
                                                   >> 292         depends on HAVE_CBPF_JIT || HAVE_EBPF_JIT
                                                   >> 293         depends on MODULES
                                                   >> 294         ---help---
                                                   >> 295           Berkeley Packet Filter filtering capabilities are normally handled
                                                   >> 296           by an interpreter. This option allows kernel to generate a native
                                                   >> 297           code when filter is loaded in memory. This should speedup
                                                   >> 298           packet sniffing (libpcap/tcpdump).
                                                   >> 299 
                                                   >> 300           Note, admin should enable this feature changing:
                                                   >> 301           /proc/sys/net/core/bpf_jit_enable
                                                   >> 302           /proc/sys/net/core/bpf_jit_harden   (optional)
                                                   >> 303           /proc/sys/net/core/bpf_jit_kallsyms (optional)
                                                   >> 304 
354 config BPF_STREAM_PARSER                          305 config BPF_STREAM_PARSER
355         bool "enable BPF STREAM_PARSER"           306         bool "enable BPF STREAM_PARSER"
356         depends on INET                           307         depends on INET
357         depends on BPF_SYSCALL                    308         depends on BPF_SYSCALL
358         depends on CGROUP_BPF                     309         depends on CGROUP_BPF
359         select STREAM_PARSER                      310         select STREAM_PARSER
360         select NET_SOCK_MSG                       311         select NET_SOCK_MSG
361         help                                   !! 312         ---help---
362           Enabling this allows a TCP stream pa !! 313          Enabling this allows a stream parser to be used with
363           BPF_MAP_TYPE_SOCKMAP.                !! 314          BPF_MAP_TYPE_SOCKMAP.
                                                   >> 315 
                                                   >> 316          BPF_MAP_TYPE_SOCKMAP provides a map type to use with network sockets.
                                                   >> 317          It can be used to enforce socket policy, implement socket redirects,
                                                   >> 318          etc.
364                                                   319 
365 config NET_FLOW_LIMIT                             320 config NET_FLOW_LIMIT
366         bool "Net flow limit"                  !! 321         bool
367         depends on RPS                            322         depends on RPS
368         default y                                 323         default y
369         help                                   !! 324         ---help---
370           The network stack has to drop packet    325           The network stack has to drop packets when a receive processing CPU's
371           backlog reaches netdev_max_backlog.     326           backlog reaches netdev_max_backlog. If a few out of many active flows
372           generate the vast majority of load,     327           generate the vast majority of load, drop their traffic earlier to
373           maintain capacity for the other flow    328           maintain capacity for the other flows. This feature provides servers
374           with many clients some protection ag    329           with many clients some protection against DoS by a single (spoofed)
375           flow that greatly exceeds average wo    330           flow that greatly exceeds average workload.
376                                                   331 
377 menu "Network testing"                            332 menu "Network testing"
378                                                   333 
379 config NET_PKTGEN                                 334 config NET_PKTGEN
380         tristate "Packet Generator (USE WITH C    335         tristate "Packet Generator (USE WITH CAUTION)"
381         depends on INET && PROC_FS                336         depends on INET && PROC_FS
382         help                                   !! 337         ---help---
383           This module will inject preconfigure    338           This module will inject preconfigured packets, at a configurable
384           rate, out of a given interface.  It     339           rate, out of a given interface.  It is used for network interface
385           stress testing and performance analy    340           stress testing and performance analysis.  If you don't understand
386           what was just said, you don't need i    341           what was just said, you don't need it: say N.
387                                                   342 
388           Documentation on how to use the pack    343           Documentation on how to use the packet generator can be found
389           at <file:Documentation/networking/pk !! 344           at <file:Documentation/networking/pktgen.txt>.
390                                                   345 
391           To compile this code as a module, ch    346           To compile this code as a module, choose M here: the
392           module will be called pktgen.           347           module will be called pktgen.
393                                                   348 
394 config NET_DROP_MONITOR                           349 config NET_DROP_MONITOR
395         tristate "Network packet drop alerting    350         tristate "Network packet drop alerting service"
396         depends on INET && TRACEPOINTS            351         depends on INET && TRACEPOINTS
397         help                                   !! 352         ---help---
398           This feature provides an alerting se !! 353         This feature provides an alerting service to userspace in the
399           event that packets are discarded in  !! 354         event that packets are discarded in the network stack.  Alerts
400           are broadcast via netlink socket to  !! 355         are broadcast via netlink socket to any listening user space
401           process.  If you don't need network  !! 356         process.  If you don't need network drop alerts, or if you are ok
402           just checking the various proc files !! 357         just checking the various proc files and other utilities for
403           drop statistics, say N here.         !! 358         drop statistics, say N here.
404                                                   359 
405 endmenu                                           360 endmenu
406                                                   361 
407 endmenu                                           362 endmenu
408                                                   363 
409 source "net/ax25/Kconfig"                         364 source "net/ax25/Kconfig"
410 source "net/can/Kconfig"                          365 source "net/can/Kconfig"
411 source "net/bluetooth/Kconfig"                    366 source "net/bluetooth/Kconfig"
412 source "net/rxrpc/Kconfig"                        367 source "net/rxrpc/Kconfig"
413 source "net/kcm/Kconfig"                          368 source "net/kcm/Kconfig"
414 source "net/strparser/Kconfig"                    369 source "net/strparser/Kconfig"
415 source "net/mctp/Kconfig"                      << 
416                                                   370 
417 config FIB_RULES                                  371 config FIB_RULES
418         bool                                      372         bool
419                                                   373 
420 menuconfig WIRELESS                               374 menuconfig WIRELESS
421         bool "Wireless"                           375         bool "Wireless"
422         depends on !S390                          376         depends on !S390
423         default y                                 377         default y
424                                                   378 
425 if WIRELESS                                       379 if WIRELESS
426                                                   380 
427 source "net/wireless/Kconfig"                     381 source "net/wireless/Kconfig"
428 source "net/mac80211/Kconfig"                     382 source "net/mac80211/Kconfig"
429                                                   383 
430 endif # WIRELESS                                  384 endif # WIRELESS
431                                                   385 
                                                   >> 386 source "net/wimax/Kconfig"
                                                   >> 387 
432 source "net/rfkill/Kconfig"                       388 source "net/rfkill/Kconfig"
433 source "net/9p/Kconfig"                           389 source "net/9p/Kconfig"
434 source "net/caif/Kconfig"                         390 source "net/caif/Kconfig"
435 source "net/ceph/Kconfig"                         391 source "net/ceph/Kconfig"
436 source "net/nfc/Kconfig"                          392 source "net/nfc/Kconfig"
437 source "net/psample/Kconfig"                      393 source "net/psample/Kconfig"
438 source "net/ife/Kconfig"                          394 source "net/ife/Kconfig"
439                                                   395 
440 config LWTUNNEL                                   396 config LWTUNNEL
441         bool "Network light weight tunnels"       397         bool "Network light weight tunnels"
442         help                                   !! 398         ---help---
443           This feature provides an infrastruct    399           This feature provides an infrastructure to support light weight
444           tunnels like mpls. There is no netde    400           tunnels like mpls. There is no netdevice associated with a light
445           weight tunnel endpoint. Tunnel encap    401           weight tunnel endpoint. Tunnel encapsulation parameters are stored
446           with light weight tunnel state assoc    402           with light weight tunnel state associated with fib routes.
447                                                   403 
448 config LWTUNNEL_BPF                               404 config LWTUNNEL_BPF
449         bool "Execute BPF program as route nex    405         bool "Execute BPF program as route nexthop action"
450         depends on LWTUNNEL && INET               406         depends on LWTUNNEL && INET
451         default y if LWTUNNEL=y                   407         default y if LWTUNNEL=y
452         help                                   !! 408         ---help---
453           Allows to run BPF programs as a next    409           Allows to run BPF programs as a nexthop action following a route
454           lookup for incoming and outgoing pac    410           lookup for incoming and outgoing packets.
455                                                   411 
456 config DST_CACHE                                  412 config DST_CACHE
457         bool                                      413         bool
458         default n                                 414         default n
459                                                   415 
460 config GRO_CELLS                                  416 config GRO_CELLS
461         bool                                      417         bool
462         default n                                 418         default n
463                                                   419 
464 config SOCK_VALIDATE_XMIT                         420 config SOCK_VALIDATE_XMIT
465         bool                                      421         bool
466                                                   422 
467 config NET_IEEE8021Q_HELPERS                   << 
468         bool                                   << 
469                                                << 
470 config NET_SELFTESTS                           << 
471         def_tristate PHYLIB                    << 
472         depends on PHYLIB && INET              << 
473                                                << 
474 config NET_SOCK_MSG                               423 config NET_SOCK_MSG
475         bool                                      424         bool
476         default n                                 425         default n
477         help                                      426         help
478           The NET_SOCK_MSG provides a framewor    427           The NET_SOCK_MSG provides a framework for plain sockets (e.g. TCP) or
479           ULPs (upper layer modules, e.g. TLS)    428           ULPs (upper layer modules, e.g. TLS) to process L7 application data
480           with the help of BPF programs.          429           with the help of BPF programs.
481                                                   430 
482 config NET_DEVLINK                                431 config NET_DEVLINK
483         bool                                   !! 432         bool "Network physical/parent device Netlink interface"
484         default n                              << 
485                                                << 
486 config PAGE_POOL                               << 
487         bool                                   << 
488                                                << 
489 config PAGE_POOL_STATS                         << 
490         default n                              << 
491         bool "Page pool stats"                 << 
492         depends on PAGE_POOL                   << 
493         help                                      433         help
494           Enable page pool statistics to track !! 434           Network physical/parent device Netlink interface provides
495           in page pools. This option incurs ad !! 435           infrastructure to support access to physical chip-wide config and
496           and recycle paths and additional mem !! 436           monitoring.
497           These statistics are only available  << 
498           the driver using the page pool suppo << 
499                                                   437 
500           If unsure, say N.                    !! 438 config PAGE_POOL
                                                   >> 439        bool
501                                                   440 
502 config FAILOVER                                   441 config FAILOVER
503         tristate "Generic failover module"        442         tristate "Generic failover module"
504         help                                      443         help
505           The failover module provides a gener    444           The failover module provides a generic interface for paravirtual
506           drivers to register a netdev and a s    445           drivers to register a netdev and a set of ops with a failover
507           instance. The ops are used as event     446           instance. The ops are used as event handlers that get called to
508           handle netdev register/unregister/li    447           handle netdev register/unregister/link change/name change events
509           on slave pci ethernet devices with t    448           on slave pci ethernet devices with the same mac address as the
510           failover netdev. This enables paravi    449           failover netdev. This enables paravirtual drivers to use a
511           VF as an accelerated low latency dat    450           VF as an accelerated low latency datapath. It also allows live
512           migration of VMs with direct attache    451           migration of VMs with direct attached VFs by failing over to the
513           paravirtual datapath when the VF is     452           paravirtual datapath when the VF is unplugged.
514                                                   453 
515 config ETHTOOL_NETLINK                         !! 454 endif   # if NET
516         bool "Netlink interface for ethtool"   << 
517         select DIMLIB                          << 
518         default y                              << 
519         help                                   << 
520           An alternative userspace interface f << 
521           netlink. It provides better extensib << 
522           e.g. notification messages.          << 
523                                                << 
524 config NETDEV_ADDR_LIST_TEST                   << 
525         tristate "Unit tests for device addres << 
526         default KUNIT_ALL_TESTS                << 
527         depends on KUNIT                       << 
528                                                << 
529 config NET_TEST                                << 
530         tristate "KUnit tests for networking"  << 
531         depends on KUNIT                       << 
532         default KUNIT_ALL_TESTS                << 
533         help                                   << 
534           KUnit tests covering core networking << 
535                                                   455 
536           If unsure, say N.                    !! 456 # Used by archs to tell that they support BPF JIT compiler plus which flavour.
                                                   >> 457 # Only one of the two can be selected for a specific arch since eBPF JIT supersedes
                                                   >> 458 # the cBPF JIT.
537                                                   459 
538 endif   # if NET                               !! 460 # Classic BPF JIT (cBPF)
                                                   >> 461 config HAVE_CBPF_JIT
                                                   >> 462         bool
                                                   >> 463 
                                                   >> 464 # Extended BPF JIT (eBPF)
                                                   >> 465 config HAVE_EBPF_JIT
                                                   >> 466         bool
                                                      

~ [ source navigation ] ~ [ diff markup ] ~ [ identifier search ] ~

kernel.org | git.kernel.org | LWN.net | Project Home | SVN repository | Mail admin

Linux® is a registered trademark of Linus Torvalds in the United States and other countries.
TOMOYO® is a registered trademark of NTT DATA CORPORATION.

sflogo.php